explore | Grilled Cheese

Z.ai's ZCode assistant quietly uploaded full repos, including .git history, to Alibaba Cloud. Features are now disabled. The lesson for every team using AI coding tools:
devops.com/your-ai-codi... #DevSecOps #AICoding #AppSec

🛡️ Sentinel Forge is live — now indexed on Zenodo with a DOI!

A local SOC-style desktop tool built with Electron, React & TypeScript:
• Supply chain audits (npm/Yarn/pnpm/Bun)
• Local SAST & Secret scanning
• Git-OPS & CycloneDX SBOM

🔗 github.com/chavatte/sentinel-forge

#DevSecOps #AppSec #InfoSec

Hello World! ⚡

Settling in around here. Building, securing, and open-sourcing software tools.

Here to connect with folks into #DevSecOps, #AppSec, #Linux, #cybersecurity, and #coding.

What's the best dev/sec community to follow here on bsky? 🚀

The latest update for #AikidoSecurity includes "Cyber Resilience Act is here! Myth busting and first impressions" and "Graphalgo campaign spreads to Terraform providers and Go Modules".

#Cybersecurity #AppSec #DevSecOps https://opsmtrs.com/48vGyRP

Blog post about what I think is a much more realistic AI cybersecurity problem than the usual “AI will hack everything” narrative:

paolozaino.wordpress.com/2026/09/21/a...

#AI #CyberSecurity #SoftwareSupplyChain #AISecurity #AppSec #LLM #Security #SoftwareEngineering #OpenSource

#Python plays a central role in modern computing, yet Python applications are not immune to cybersecurity threats. Developing secure programs in Python requires understanding its strengths and limitations in handling security.

Check: www.pycon-nl.org

#pycon #utrecht #jaarbeurs #security #appsec

📢 New 7ASecurity public #SecurityAudit report
🔐 Bayanat audited by 7ASecurity: 43 findings & recommendations, all resolved & verified. ✅
🔗 7asecurity.com/blog/2026/09...
💬 Feedback welcome

#CyberSecurity #OpenSourceSecurity #AppSec #InfoSec #Bayanat

SAML: A fractal of bad design #appsec

MFA Won't Save You From OAuth Consent Abuse #appsec

The latest update for #Zenity includes "The Agent Will See You Now: Why #Healthcare's #AI Agent Boom Needs Visibility and Control" and "'AI Regulation' Isn't One Debate. It's Several, Wearing the Same Coat.".

#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH

Se cree que la seguridad empieza al escribir código. En realidad empieza definiendo allow, block y aprobación humana, con audit log y trust boundaries claros. #threatmodel #appsec #infosec

We are very glad to have you with us again! 🤝

Discover itRISKman: www.itriskman.de

See all our sponsors: lnkd.in/eGD7djRY

#osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity #OpenSpace [nazneen]

Plugin4Shell: a Git branch named after a commit hash can impersonate it. Four AI coding agents' plugin-pinning checks fall for it. 2 of 4 vendors patched so far.

https://rtfclmgzn.com/?utm_source=bluesky&utm_medium=social&utm_campaign=autopost#
#AppSec #Plugin4Shell #SHA

Cache key injection: Smuggling poison through the door #appsec

🤖 sastIA — SAST auditing with an AI agent pipeline.
VulnHunter methodology (recon → hunt → verify → PoC → report), OpenCode agents running Semgrep, Gitleaks & Bandit. Findings with impact analysis and remediation.
🔗 https://github.com/madpowah/sastIA
#SAST #AppSec #AI #InfoSec

Turns out, the polish airlines have misplaced all my luggage and equipment that I brought with me except these decks so now I have this and nothing else. I am becoming a more and more like a courier every day. This won’t go well.

#owasp #cornucopia #security #games #appsec #threatmodeling

Scanners miss logic. OWASP #1 (Broken Access Control) usually requires a human touch. Pro-tip: Try swapping user IDs in your API requests. If you see someone else's data, you’ve found a critical. 🛡️

#AppSec #OWASP #BugBounty

TanStack Supply Chain Attack Analysis #appsec